Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
Apple has patched a critical out-of-bounds write vulnerability (CVE-2026-20616) in macOS's libusd_ms library that could allow remote attackers to execute arbitrary code via a malicious Alembic file.
A local privilege escalation vulnerability in Fortinet FortiClient, tracked as CVE-2026-24018, allows attackers to gain root access via a symbolic link attack on shared objects.
Apple has released a security update for macOS to fix CVE-2026-20634, an out-of-bounds read vulnerability in the ImageIO framework that can be triggered by a specially crafted SGI image file.
Microsoft has patched a high-severity local privilege escalation vulnerability in the Windows cdd.dll driver that allows attackers with low-privileged code execution to gain SYSTEM privileges.
Apple has released a security update addressing CVE-2026-20675, a critical integer overflow vulnerability in the macOS ImageIO framework that could allow remote code execution via crafted SGI image files.
Microsoft has released a patch for CVE-2026-23668, a critical local privilege escalation vulnerability in the win32kfull driver that allows attackers to gain SYSTEM privileges.
Apple has released a security update for macOS to address CVE-2026-20611, a critical out-of-bounds write vulnerability in the Audio APAC frame decoder that could allow remote code execution with user interaction.
Microsoft has patched a local privilege escalation vulnerability in the Windows win32kfull driver, tracked as CVE-2026-24285, which allows an attacker with low-privileged code execution to gain SYSTEM-level access.
Trend Micro researchers have identified critical security weaknesses in OpenClaw, a viral sovereign agent framework, including insufficient input validation and potential for arbitrary code execution.
Trend Micro MDR analysis reveals KongTuke still uses compromised WordPress sites and fake CAPTCHA lures to deliver modeloRAT, leveraging legitimate Windows tools for stealth.
Huntress researchers uncovered a campaign where a threat actor exploited vulnerabilities in SolarWinds Web Help Desk and other enterprise software, then used a free trial of Elastic Cloud SIEM to store and triage stolen system data from over 200 hosts.
A breach at TriZetto Provider Solutions, a Cognizant subsidiary, has compromised the personal and health insurance information of over 3.4 million patients.
A critical path traversal vulnerability in Unraid's auth-request.php allows unauthenticated attackers to bypass authentication entirely, with a CVSS score of 7.3.
A critical path traversal vulnerability in Unraid (CVE-2026-3838) allows authenticated remote attackers to execute arbitrary code as root, with a CVSS score of 8.8.
Trend Micro researchers demonstrated document-based exploits against AI-driven KYC pipelines and introduced FENRIR, an automated system for discovering AI vulnerabilities at scale.
Iranian state-linked group MuddyWater is targeting US companies with a new backdoor called Dindoor, signed with a certificate issued to 'Amy Cherne' and leveraging the Deno runtime.
Google Threat Intelligence Group reports 90 zero-day vulnerabilities exploited in the wild in 2025, with 48% targeting enterprise software and appliances, marking a structural shift in the threat landscape.
A critical out-of-bounds write vulnerability in GStreamer's H.266 codec parser (CVE-2026-3086) can be exploited for remote code execution, with a CVSS score of 7.8.
A critical integer underflow vulnerability in GStreamer's H.266 codec parser, tracked as CVE-2026-3084, allows remote attackers to execute arbitrary code by tricking users into processing a malicious file.
A heap-based buffer overflow in the Philips Hue Bridge's HomeKit Pair-Setup functionality, disclosed at Pwn2Own, allows unauthenticated network-adjacent attackers to execute arbitrary code.
A local privilege escalation vulnerability in Docker Desktop's plugins directory handling, tracked as CVE-2025-15558, allows attackers with low-privileged code execution to gain elevated access; Docker has released a fix.
A critical heap-based buffer overflow vulnerability in GStreamer's rtpqdm2depay element, tracked as CVE-2026-3085, allows remote attackers to execute arbitrary code via specially crafted X-QDM RTP payloads.
A stack-based buffer overflow in GStreamer's H.266 codec parser, tracked as CVE-2026-3081, allows remote attackers to execute arbitrary code on affected systems.
A heap-based buffer overflow in the Philips Hue Bridge's hap_pair_verify_handler function, disclosed via Pwn2Own, allows network-adjacent attackers to bypass authentication and execute arbitrary code as root.